This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4/ce8a605a-778c-4076-ac87-8f698230a8e4.mft File: ce8a605a-778c-4076-ac87-8f698230a8e4.mft (raw, json) Hash identifier: WXx4uIGuJTniEz3VM5n/RCekLBgSfsL4adrEwIYWGXk= Subject key identifier: 9E:F6:DD:C3:18:9A:BB:A1:9F:BB:A8:2B:A8:79:00:AC:0D:8C:07:79 Authority key identifier: 01:D9:CA:EF:4E:D5:37:19:0B:4A:C3:59:98:A6:BF:5D:39:AB:6A:0F Certificate issuer: /CN=ce8a605a-778c-4076-ac87-8f698230a8e4 Certificate serial: 010D0C9F4328584C14364AFF0E523E12883FCCC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4/ce8a605a-778c-4076-ac87-8f698230a8e4.mft Manifest number: 010D0C9F432858478AE69C0D857A25435023582A Signing time: Thu 04 Dec 2025 21:00:09 +0000 Manifest this update: Thu 04 Dec 2025 21:00:09 +0000 Manifest next update: Sun 07 Dec 2025 21:00:00 +0000 Files and hashes: 1: ce8a605a-778c-4076-ac87-8f698230a8e4.crl (hash: ItXS/n9mRMnNq/r8E3ZZzZQQxoEtD8uZS8BzARHLV8I=) 2: fb86efe7-bd59-3648-97e8-ac622b3ed5bf.roa (hash: /iG7peanSVZPX3d5FXyHMyuwJhyBz+OY2SJw1lyG/wE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4/ce8a605a-778c-4076-ac87-8f698230a8e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4/ce8a605a-778c-4076-ac87-8f698230a8e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:36:4a:ff:0e:52:3e:12:88:3f:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce8a605a-778c-4076-ac87-8f698230a8e4 Validity Not Before: Dec 4 21:00:09 2025 GMT Not After : Dec 7 21:00:00 2025 GMT Subject: CN=a4b8368b-2146-474a-867b-0e0afa9e37e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0f:42:50:c2:2f:c2:01:c4:c5:2f:52:08:e1: 4b:56:63:2d:55:92:0f:2f:d7:af:bd:90:35:2f:7e: f1:92:4a:09:b8:95:c8:19:44:6d:6a:df:2a:36:46: 95:a2:28:7e:c9:88:1c:0a:df:67:36:c5:d1:b2:1a: d8:86:b6:0e:b7:31:6b:82:18:14:20:5b:6e:94:30: 43:6d:8b:78:30:0a:b4:8f:8f:0f:79:d3:04:01:69: 26:50:46:f0:7c:f9:5f:8a:f7:00:97:56:da:2b:8c: 65:08:7d:82:d6:1b:4a:95:46:62:fe:87:66:ad:a8: 7f:80:47:49:be:2c:a3:aa:db:b5:9b:5c:93:d7:64: 4f:b5:ca:56:33:8a:66:f3:53:b0:06:69:82:a9:0f: d1:d0:b5:30:9e:af:aa:5e:a8:4c:2b:6a:2e:f7:d5: e4:d3:60:51:56:e0:cb:52:71:f9:3b:b3:c6:4a:4b: 7c:13:fd:69:21:e3:c3:25:53:d9:1c:a1:eb:e3:8d: 0a:4b:0d:12:35:d1:30:3b:d7:b3:1c:b3:5b:63:e3: 4c:c3:c7:90:47:01:76:28:60:c3:b4:c2:33:52:7f: f6:21:7c:18:d1:61:57:62:31:fe:41:0e:9f:4e:d7: de:2f:91:86:dd:af:4d:5d:8d:0f:ce:ac:a7:c3:48: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F6:DD:C3:18:9A:BB:A1:9F:BB:A8:2B:A8:79:00:AC:0D:8C:07:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4/ce8a605a-778c-4076-ac87-8f698230a8e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4/ce8a605a-778c-4076-ac87-8f698230a8e4.crl X509v3 Authority Key Identifier: keyid:01:D9:CA:EF:4E:D5:37:19:0B:4A:C3:59:98:A6:BF:5D:39:AB:6A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:52:90:7f:94:9f:d4:f7:59:bb:0c:15:44:cc:10:f7:8d:c3: 0e:c0:e6:bd:24:31:c7:e2:e0:5f:e6:9f:30:d3:32:f4:06:ec: e5:5e:e8:54:3d:9b:10:92:ad:a2:8d:5a:67:db:3a:7e:2f:51: ba:e5:dc:ee:cf:62:a8:9a:8d:57:ec:98:c6:f9:5e:7b:a9:b1: a6:cb:1a:ff:1b:30:fa:27:86:f1:c3:33:19:12:21:40:49:54: c3:e2:60:a1:ec:77:16:af:28:2e:c1:4f:b7:44:f9:fb:47:4b: dd:39:b7:2c:28:f3:60:49:c8:24:b5:d7:5a:9a:93:cc:c0:b6: da:39:95:ec:69:fd:fa:38:61:c4:e0:6c:92:b2:24:b2:3c:d3: 17:a3:eb:07:b7:f9:7c:bd:ea:53:8e:8a:e4:a1:5c:5f:da:58: 71:ed:fc:42:49:04:f8:a0:91:58:27:27:68:6b:cc:f9:9d:75: 6e:45:6a:8f:0e:aa:bd:09:58:ae:7a:3e:db:ac:a0:8b:36:0b: 74:0a:66:86:be:7d:58:b9:46:d0:2b:ce:26:31:ba:e9:fc:2f: fd:bf:ff:81:b9:58:da:43:89:8d:9b:28:4a:05:79:ba:44:3a: 52:28:e6:38:3c:45:58:33:a7:a6:ed:07:96:99:c6:d7:5d:58: b9:5f:c0:bf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwUNkr/DlI+Eog/zMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U4YTYwNWEtNzc4Yy00MDc2LWFjODctOGY2OTgyMzBh OGU0MB4XDTI1MTIwNDIxMDAwOVoXDTI1MTIwNzIxMDAwMFowLzEtMCsGA1UEAxMk YTRiODM2OGItMjE0Ni00NzRhLTg2N2ItMGUwYWZhOWUzN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg9CUMIvwgHExS9SCOFLVmMtVZIPL9evvZA1 L37xkkoJuJXIGURtat8qNkaVoih+yYgcCt9nNsXRshrYhrYOtzFrghgUIFtulDBD bYt4MAq0j48PedMEAWkmUEbwfPlfivcAl1baK4xlCH2C1htKlUZi/odmrah/gEdJ viyjqtu1m1yT12RPtcpWM4pm81OwBmmCqQ/R0LUwnq+qXqhMK2ou99Xk02BRVuDL UnH5O7PGSkt8E/1pIePDJVPZHKHr440KSw0SNdEwO9ezHLNbY+NMw8eQRwF2KGDD tMIzUn/2IXwY0WFXYjH+QQ6fTtfeL5GG3a9NXY0Pzqynw0jVoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ723cMYmruhn7uoK6h5AKwNjAd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZThh NjA1YS03NzhjLTQwNzYtYWM4Ny04ZjY5ODIzMGE4ZTQvY2U4YTYwNWEtNzc4Yy00 MDc2LWFjODctOGY2OTgyMzBhOGU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2U4YTYwNWEtNzc4Yy00MDc2LWFj ODctOGY2OTgyMzBhOGU0L2NlOGE2MDVhLTc3OGMtNDA3Ni1hYzg3LThmNjk4MjMw YThlNC5jcmwwHwYDVR0jBBgwFoAUAdnK707VNxkLSsNZmKa/XTmrag8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZThhNjA1YS03NzhjLTQwNzYtYWM4Ny04ZjY5 ODIzMGE4ZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCzUpB/lJ/U91m7DBVEzBD3 jcMOwOa9JDHH4uBf5p8w0zL0BuzlXuhUPZsQkq2ijVpn2zp+L1G65dzuz2Komo1X 7JjG+V57qbGmyxr/GzD6J4bxwzMZEiFASVTD4mCh7HcWryguwU+3RPn7R0vdObcs KPNgScgktddampPMwLbaOZXsaf36OGHE4GySsiSyPNMXo+sHt/l8vepTjorkoVxf 2lhx7fxCSQT4oJFYJydoa8z5nXVuRWqPDqq9CViuej7brKCLNgt0CmaGvn1YuUbQ K84mMbrp/C/9v/+BuVjaQ4mNmyhKBXm6RDpSKOY4PEVYM6em7QeWmcbXXVi5X8C/ -----END CERTIFICATE-----Generated at Fri Dec 5 13:25:21 2025 by rpki-client